Adding Exception Source have multiple IP

Vishnu_prasath — Thu, 26 Mar 2026 06:06:08 GMT

Hi,

I am Facing issue mail blocking checkpoint firewall under the Anti-virus blade. we have tried to adding exception manually and automatically using log but not effective. later we find source domain multiple IP's

Re: Adding Exception Source have multiple IP

PhoneBoy — Fri, 27 Mar 2026 17:45:54 GMT

If you're doing based on the logs, you're probably doing an IP-based exception.

To a do a proper exception for all emails from a given domain, various DNS records would have to be interrogated to understand what IPs are acceptable to send email AS a given domain.
The product does not do this, to the best of my knowledge.

You should be able to create manual exceptions for the FDQNs for the relevant domain's MX entries.
These could be done as FQDN Domain Objects.
For example, if you wanted to create an exception for phoneboy.me for email, you'd create two domain objects:

One for mx01.mail.icloud.com
One for mx02.mail.icloud.com

The gateway will resolve these names to the relevant IPs.
It may not catch all exclusions, but it's a good start.

topic Re: Adding Exception Source have multiple IP in Firewall and Security Management

Adding Exception Source have multiple IP

Re: Adding Exception Source have multiple IP